Privacy Policy

This Privacy Policy describes how MYNZ LIMITED("ruvv", "we") collects, uses, stores, and shares personal information when you use the ruvv website and related services (the "Services"), wherever you are located. We handle personal information in accordance with the privacy and data-protection laws that apply to us and to you—for example the New Zealand Privacy Act 2020, the EU and UK General Data Protection Regulation (GDPR) where they apply, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) where it applies. By using the Services, you acknowledge this Policy.

Who is responsible

MYNZ LIMITED, a company incorporated in New Zealand that operates the ruvv marketplace, is the data controller (the organisation responsible) for personal information processed in connection with the Services. Certain processing may occur through service providers or affiliated operations (including order fulfilment coordinated through our Korean subsidiary functions described on our website).

Information we collect

• Account & profile: name, email address, and optional profile details when you register or sign in (including via Google sign-in where enabled).
• Orders & delivery: delivery address, phone number, order contents, delivery updates, and communications about your purchase.
• Payments: payment transactions are handled by payment processors (e.g. Stripe). We typically receive limited payment metadata (status, last four digits where applicable) rather than full card numbers, which are processed directly by the processor under their privacy policy.
• Support & chat: messages you send to us, including chat transcripts where that feature is offered.
• Technical & usage: IP address, device type, browser, approximate region (which may be used to show prices in your local currency), cookies or similar technologies, and interaction events needed to run and secure the Services (including Google Analytics).
• Seller applicants: if you apply to sell on ruvv, we collect application details you submit for onboarding and compliance review.

How we use information

• Provide, operate, and improve the marketplace and checkout.
• Deliver orders, including sharing your name, address and phone number with couriers and, where needed, with customs authorities or brokers for import clearance in your destination country.
• Process payments, prevent fraud, and enforce our Terms.
• Communicate about orders, security, and (where you have opted in) marketing.
• Analyse aggregate usage to improve product experience and performance.
• Comply with legal obligations (including tax and accounting record-keeping) and respond to lawful requests.

Where the law requires a legal basis for processing (for example under the GDPR), we rely on performing our contract with you, our legitimate interests in running and securing the Services, compliance with legal obligations, and your consent where we ask for it (for example for marketing or non-essential cookies).

Sharing & service providers

We share personal information with vendors who help us run the Services—such as hosting, email delivery, payment processing, analytics, customer support tooling, couriers, customs brokers and fraud prevention—under contractual safeguards. We do not sell your personal information for money. We may disclose information if required by law or to protect rights and safety. If we undertake a business transaction (e.g. merger), your information may transfer subject to appropriate protections.

International data transfers

Because we serve customers worldwide, and because our service providers and fulfilment partners operate in several countries (including New Zealand, Korea and other countries where our providers host or process data), your personal information may be transferred to and processed in countries other than the one you live in. Those countries may have different data-protection laws. Where we transfer personal information internationally, we take reasonable steps to ensure it remains protected—for example through contractual safeguards with recipients or by relying on the recipient country's privacy laws—as required by the laws that apply to the transfer.

Retention

We retain personal information only as long as needed for the purposes above, including legal, tax, and dispute-resolution periods. Order and transaction records are kept for as long as required by applicable tax and accounting laws.

Your rights

Depending on where you live, you may have the right to request access to, and correction of, the personal information we hold about you; to ask us to delete it; to object to or restrict certain processing; to receive a copy of it in a portable format; to withdraw consent where we rely on consent; and to opt out of marketing communications at any time. Residents of some jurisdictions (for example California) may also have rights to know what categories of information we collect and share, and not to be discriminated against for exercising their rights. To exercise these rights, contact us using the details below; we will respond within the timeframes required by the law that applies to you and may verify your identity first. You also have the right to complain to your local data-protection authority (for example, in New Zealand, the Office of the Privacy Commissioner).

Children

The Services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

Cookies & similar technologies

We use cookies and similar technologies for essential operation of the site (e.g. session, security, cart, currency preference), preferences where applicable, and analytics to understand usage. You can control cookies through browser settings; disabling some cookies may limit functionality.

Security & breaches

We use reasonable technical and organisational safeguards to protect personal information. If a privacy breach occurs that is likely to cause serious harm, we will notify the relevant data-protection authorities and affected individuals as required by applicable law.

Updates

We may update this Policy periodically. The "Last updated" date at the top will change; material changes may be communicated through the Services where appropriate.

Contact

For privacy requests or questions, contact our privacy officer through the support options published on the ruvv website (in-site chat or the support email shown in your order confirmation). We will respond within the timeframes required by applicable law.